|
Packit |
209cc3 |
.\" Copyright (c) 1994, 1996, 1997
|
|
Packit |
209cc3 |
.\" The Regents of the University of California. All rights reserved.
|
|
Packit |
209cc3 |
.\"
|
|
Packit |
209cc3 |
.\" Redistribution and use in source and binary forms, with or without
|
|
Packit |
209cc3 |
.\" modification, are permitted provided that: (1) source code distributions
|
|
Packit |
209cc3 |
.\" retain the above copyright notice and this paragraph in its entirety, (2)
|
|
Packit |
209cc3 |
.\" distributions including binary code include the above copyright notice and
|
|
Packit |
209cc3 |
.\" this paragraph in its entirety in the documentation or other materials
|
|
Packit |
209cc3 |
.\" provided with the distribution, and (3) all advertising materials mentioning
|
|
Packit |
209cc3 |
.\" features or use of this software display the following acknowledgement:
|
|
Packit |
209cc3 |
.\" ``This product includes software developed by the University of California,
|
|
Packit |
209cc3 |
.\" Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
|
|
Packit |
209cc3 |
.\" the University nor the names of its contributors may be used to endorse
|
|
Packit |
209cc3 |
.\" or promote products derived from this software without specific prior
|
|
Packit |
209cc3 |
.\" written permission.
|
|
Packit |
209cc3 |
.\" THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
|
|
Packit |
209cc3 |
.\" WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
|
|
Packit |
209cc3 |
.\" MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
|
|
Packit |
209cc3 |
.\"
|
|
Packit |
209cc3 |
.TH PCAP_OFFLINE_FILTER 3PCAP "7 April 2014"
|
|
Packit |
209cc3 |
.SH NAME
|
|
Packit |
209cc3 |
pcap_offline_filter \- check whether a filter matches a packet
|
|
Packit |
209cc3 |
.SH SYNOPSIS
|
|
Packit |
209cc3 |
.nf
|
|
Packit |
209cc3 |
.ft B
|
|
Packit |
209cc3 |
#include <pcap/pcap.h>
|
|
Packit |
209cc3 |
.ft
|
|
Packit |
209cc3 |
.LP
|
|
Packit |
209cc3 |
.ft B
|
|
Packit |
209cc3 |
int pcap_offline_filter(const struct bpf_program *fp,
|
|
Packit |
209cc3 |
.ti +8
|
|
Packit |
209cc3 |
const struct pcap_pkthdr *h, const u_char *pkt)
|
|
Packit |
209cc3 |
.ft
|
|
Packit |
209cc3 |
.fi
|
|
Packit |
209cc3 |
.SH DESCRIPTION
|
|
Packit |
209cc3 |
.B pcap_offline_filter()
|
|
Packit |
209cc3 |
checks whether a filter matches a packet.
|
|
Packit |
209cc3 |
.I fp
|
|
Packit |
209cc3 |
is a pointer to a
|
|
Packit |
209cc3 |
.I bpf_program
|
|
Packit |
209cc3 |
struct, usually the result of a call to
|
|
Packit |
209cc3 |
.BR pcap_compile(3PCAP) .
|
|
Packit |
209cc3 |
.I h
|
|
Packit |
209cc3 |
points to the
|
|
Packit |
209cc3 |
.I pcap_pkthdr
|
|
Packit |
209cc3 |
structure for the packet, and
|
|
Packit |
209cc3 |
.I pkt
|
|
Packit |
209cc3 |
points to the data in the packet.
|
|
Packit |
209cc3 |
.SH RETURN VALUE
|
|
Packit |
209cc3 |
.B pcap_offline_filter()
|
|
Packit |
209cc3 |
returns the return value of the filter program. This will be zero if
|
|
Packit |
209cc3 |
the packet doesn't match the filter and non-zero if the packet matches
|
|
Packit |
209cc3 |
the filter.
|
|
Packit |
209cc3 |
.SH SEE ALSO
|
|
Packit |
209cc3 |
pcap(3PCAP)
|